Skip to content(if available)orjump to list(if available)

Is the use of reCAPTCHA GDPR-compliant?

Is the use of reCAPTCHA GDPR-compliant?

15 comments

·February 7, 2025
Visit

gpvos

I get a wall of text with cookie approval/rejection buttons, but on mobile I can't even scroll to the top of the text to read it all. What a failure.

ta1243

Deliberate choice by the company trying to take your data. They don't have to do that, they want you to be pissed off with the wrong people.

nottorp

And it's in German right?

fsflover

Try to switch off js.

firtoz

Was it gdpr compliant at least

nixass

Germany.. a place where you cannot put random photos from a street where license plates are not blurred on internet, but having your name on your doorbell is totally okay.

roelschroeven

There's a massive difference between your personally identifiable information visible to people who physically pass by versus people all over the world + various automated tools.

Also you're making a difference between license plates and doorbell names where there is no difference; it's only muddying the waters. The only difference is: visible to people physically close by is ok, visible on internet is not ok.

mmsc

False equivalence. Having your name on your own doorbell is a choice.

tpxl

Discussion from 1.5 years ago: https://news.ycombinator.com/item?id=36430280

notpushkin

> Google's invisible reCAPTCHA V3 simulation is now used on many websites around the world and no longer uses tests to check the humanity of users, but is based on behavioural analysis.

I had no idea. 90% of the time I’m getting the Please select all stairs bullshit. Another 5% is an outright block for “suspicious activity”. (I’m on Firefox, FWIW.)

vasco

That's 90% of the times you even see it :)

notpushkin

Fair enough! I was thinking about the checkbox variant, not the “invisible captcha”. But I have a feeling I’m still getting the task for that as well, most of the time.

metters

Is ProtonCaptcha [1] a good alternative to reCaptcha? I’m sure it is GDPR compliant but can anyone just use it?

[1] https://proton.me/blog/proton-captcha

notpushkin

I’d just selfhost a PoW captcha like https://mcaptcha.org/ – should be fine for most applications.

KronisLV

Thanks for linking this, it’s always nice to see self hosted options.